Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.cer (raw, json)
Hash identifier: JThfR7Zp/rHzB4e2KJArLlCW028HFv1HP8gV8ZfXElw=
Subject key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D6D4978E2D9A0B0B3343E351A7F0840D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Apr 2026 13:30:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49405
IP: 45.149.96.0/22
IP: 81.85.61.0/24
IP: 91.212.215.0/24
IP: 91.236.192.0/24
IP: 95.36.80.0/20
IP: 212.85.56.0/21
IP: 217.18.80.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:49:78:e2:d9:a0:b0:b3:34:3e:35:1a:7f:08:40:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 13:30:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54ac0ddec30e24e457e16e6507d219728310893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:34:4f:b7:fd:6c:ae:f7:ea:a2:d5:33:3b:
19:a0:c7:6b:23:62:c4:f2:45:17:4e:68:aa:32:68:
93:31:de:82:e6:a3:45:44:46:75:00:99:ce:73:14:
6c:a7:ed:7d:e2:c6:ca:88:d5:29:4f:d4:50:9d:38:
c8:3e:b4:59:53:6e:85:67:e1:cb:18:1a:86:a2:c3:
3b:3f:fa:f4:36:ed:fe:63:48:ec:3a:6e:cb:0e:5b:
dc:49:c1:5e:1c:32:b0:9e:18:56:81:c2:1d:bc:d9:
1a:ea:c7:7e:a8:44:0e:f7:b0:de:f6:90:cd:f2:80:
51:e4:89:9c:75:80:1b:10:da:b5:23:cf:b2:4f:16:
86:10:90:e9:1d:0d:46:0a:e6:fc:4b:29:b1:85:b8:
08:4e:b8:fe:54:73:b5:97:3d:28:3a:c6:73:05:9d:
9a:48:6d:f2:ed:d4:80:71:98:43:32:42:f6:20:15:
60:e1:6c:ba:c2:b7:cd:46:f7:a3:f7:de:76:97:73:
3d:a6:a3:01:f1:bd:85:57:9d:d3:58:28:49:7a:16:
a9:4a:9f:9c:12:9a:a9:1f:8a:3d:52:41:5e:72:52:
47:6d:c9:4c:5a:bc:9d:74:6b:f7:b0:b9:8e:b1:63:
02:57:00:bc:d1:ed:f1:6e:7a:ef:96:37:95:2a:2d:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.96.0/22
81.85.61.0/24
91.212.215.0/24
91.236.192.0/24
95.36.80.0/20
212.85.56.0/21
217.18.80.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49405
Signature Algorithm: sha256WithRSAEncryption
08:f9:cd:3d:a9:45:7b:6f:76:86:52:12:3c:93:d0:c6:3d:65:
9a:3d:a8:27:ae:4f:67:0a:b7:39:22:53:c1:dd:68:b9:93:6c:
6a:77:b4:76:e3:60:98:d4:3c:46:a4:c3:2d:6c:36:b8:be:3b:
b5:3a:a1:5f:25:c6:b5:78:03:93:44:95:af:7e:33:bb:31:27:
98:b2:50:18:6f:69:fe:fb:72:4b:46:de:fe:7c:3d:44:f8:11:
6c:64:ca:0f:2d:3a:e0:62:49:13:3c:cd:26:63:c8:da:7b:bc:
cc:8a:56:a2:67:31:3b:bb:06:8d:f6:87:d2:95:f8:22:f3:a4:
24:51:78:e7:4f:bb:22:6f:f2:37:10:32:e7:55:d5:40:cd:6c:
e1:fa:88:04:4b:36:66:7a:2c:a2:22:ab:50:7a:6e:8b:43:7b:
bc:33:cb:cb:9d:2f:5d:d1:b7:26:99:84:05:04:3e:0c:63:f2:
83:f7:ac:ba:2c:48:e2:64:63:59:d2:3f:a1:c7:d6:6a:0b:aa:
a6:37:6c:0e:e3:db:85:3a:f5:0a:88:5a:ed:a8:00:cd:b2:ac:
f0:33:33:5f:26:07:c3:dd:9a:99:fb:5d:5a:36:e9:95:10:c9:
3c:54:fa:ef:d9:e3:6a:75:bb:39:02:61:f7:5c:20:76:99:0b:
ba:ff:a2:31
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAZ1tSXji2aCwszQ+NRp/CEDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDA4MTMzMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGFjMGRkZWMzMGUyNGU0NTdlMTZlNjUwN2QyMTk3MjgzMTA4OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ak0T7f9bK736qLVMzsZoMdrI2LE
8kUXTmiqMmiTMd6C5qNFREZ1AJnOcxRsp+194sbKiNUpT9RQnTjIPrRZU26FZ+HL
GBqGosM7P/r0Nu3+Y0jsOm7LDlvcScFeHDKwnhhWgcIdvNka6sd+qEQO97De9pDN
8oBR5ImcdYAbENq1I8+yTxaGEJDpHQ1GCub8SymxhbgITrj+VHO1lz0oOsZzBZ2a
SG3y7dSAcZhDMkL2IBVg4Wy6wrfNRvej9952l3M9pqMB8b2FV53TWChJehapSp+c
EpqpH4o9UkFeclJHbclMWryddGv3sLmOsWMCVwC80e3xbnrvljeVKi2btwIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFFSsDd7DDiTkV+FuZQfSGXKDEIk9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzJkZGQz
OS1lN2JkLTQ0YmEtYWIyMS0yZjA2NTVmMDEwMjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMmRkZDM5
LWU3YmQtNDRiYS1hYjIxLTJmMDY1NWYwMTAyOS8xL1ZLd04zc01PSk9SWDRXNWxC
OUlaY29NUWlUMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAwBAIAATAqAwQCLZVgAwQAUVU9AwQAW9TXAwQAW+zAAwQEXyRQ
AwQD1FU4AwQA2RJQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDA/TANBgkqhkiG
9w0BAQsFAAOCAQEACPnNPalFe292hlISPJPQxj1lmj2oJ65PZwq3OSJTwd1ouZNs
ane0duNgmNQ8RqTDLWw2uL47tTqhXyXGtXgDk0SVr34zuzEnmLJQGG9p/vtyS0be
/nw9RPgRbGTKDy064GJJEzzNJmPI2nu8zIpWomcxO7sGjfaH0pX4IvOkJFF450+7
Im/yNxAy51XVQM1s4fqIBEs2ZnosoiKrUHpui0N7vDPLy50vXdG3JpmEBQQ+DGPy
g/esuixI4mRjWdI/ocfWaguqpjdsDuPbhTr1Coha7agAzbKs8DMzXyYHw92amftd
WjbplRDJPFT679njanW7OQJh91wgdpkLuv+iMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:35:05 2026 by rpki-client